CVE-2024-39884

Medium

Advisory

Published 4 Jul 2024In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.2; base score, highest
EPSS: 0.009; 57th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 16; of 17,781 indexed, latest versions
Container images: 16; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 16 images.

Affected package	Affected versions	Fixed in	Images
apache2deb	2.4.41-4ubuntu3.11, 2.4.41-4ubuntu3.12, 2.4.41-4ubuntu3.14, 2.4.41-4ubuntu3.17+1 more	2.4.41-4ubuntu3.19, 2.4.52-1ubuntu4.10	11
apache2apk	2.4.54-r1, 2.4.57-r3, 2.4.58-r0, 2.4.59-r0	2.4.61-r0	5

OSV records: ALPINE-CVE-2024-39884 UBUNTU-CVE-2024-39884
Also known as: USN-6885-1

Charts affected

16 by stars

Chart

Latest

Affected images

Radar Score

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19

Open the chart page →

18,509

organizrgeek-cookbook

7.4.2

1 of 1 See more

organizr geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
organizr/organizr :latest	1ce319d73cdf	apache2@2.4.58-r0	2.4.61-r0

Open the chart page →

1,533

keystonearzu

0.2.29

2 of 4 See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	apache2@2.4.41-4ubuntu3.14	2.4.41-4ubuntu3.19
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	apache2@2.4.41-4ubuntu3.14	2.4.41-4ubuntu3.19

Open the chart page →

22,568

supportpalevilgn0me

0.1.6

1 of 1 See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	apache2@2.4.41-4ubuntu3.11	2.4.41-4ubuntu3.19

Open the chart page →

20,933

apache-musicindexgeek-cookbook

2.4.2

1 of 1 See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19

Open the chart page →

14,659

rtorrent-rutorrentgeek-cookbook

1.1.2

1 of 1 See more

rtorrent-rutorrent geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
crazymax/rtorrent-rutorrent :3.10-0.9.8-0.13.8	fb307f5b87bf	apache2@2.4.54-r1	2.4.61-r0

Open the chart page →

4,232

nominatimheywood8-helm-charts

3.10.8

1 of 3 See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
mediagis/nominatim :4.2	d0eae7b51374	apache2@2.4.52-1ubuntu4.7	2.4.52-1ubuntu4.10

Open the chart page →

14,290

organizrk8s-home-lab-repo

8.1.1

1 of 1 See more

organizr k8s-home-lab-repo 8.1.1

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
organizr/organizr :latest	1ce319d73cdf	apache2@2.4.58-r0	2.4.61-r0

Open the chart page →

1,533

phppgadminkfirfer

0.1.12

1 of 1 See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19

Open the chart page →

10,248

freescoutl4g

0.1.0

1 of 3 See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	apache2@2.4.59-r0	2.4.61-r0

Open the chart page →

5,332

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19

Open the chart page →

22,658

podnat-state-storepodnat-controller

0.3.2

1 of 1 See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19

Open the chart page →

9,167

seashellpuckpuck

1.2.0

1 of 1 See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	apache2@2.4.57-r3	2.4.61-r0

Open the chart page →

4,215

grocysarab97

0.1.1

1 of 1 See more

grocy sarab97 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
linuxserver/grocy :4.0.1	f8f5f96b6ea8	apache2@2.4.57-r3	2.4.61-r0

Open the chart page →

2,449

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	apache2@2.4.41-4ubuntu3.11	2.4.41-4ubuntu3.19

Open the chart page →

30,687

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-39884.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	apache2@2.4.41-4ubuntu3.17	2.4.41-4ubuntu3.19

Open the chart page →

18,756

Container images carrying it

16 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
organizr/organizr :latest	1ce319d73cdf	apache2@2.4.58-r0	2.4.61-r0	2
crazymax/rtorrent-rutorrent :3.10-0.9.8-0.13.8	fb307f5b87bf	apache2@2.4.54-r1	2.4.61-r0	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19	1
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19	1
linuxserver/grocy :4.0.1	f8f5f96b6ea8	apache2@2.4.57-r3	2.4.61-r0	1
mediagis/nominatim :3.7	c15e941485ef	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19	1
mediagis/nominatim :4.2	d0eae7b51374	apache2@2.4.52-1ubuntu4.7	2.4.52-1ubuntu4.10	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	apache2@2.4.41-4ubuntu3.14	2.4.41-4ubuntu3.19	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	apache2@2.4.41-4ubuntu3.14	2.4.41-4ubuntu3.19	1
snipe/snipe-it :v6.0.14	55fb7636a98c	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	apache2@2.4.41-4ubuntu3.11	2.4.41-4ubuntu3.19	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	apache2@2.4.41-4ubuntu3.17	2.4.41-4ubuntu3.19	1
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	apache2@2.4.59-r0	2.4.61-r0	1
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	apache2@2.4.41-4ubuntu3.12	2.4.41-4ubuntu3.19	1
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	apache2@2.4.57-r3	2.4.61-r0	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	apache2@2.4.41-4ubuntu3.11	2.4.41-4ubuntu3.19	1